Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FABB91328C1511F1BA0DE0B4CE1D38B0.roa
File: FABB91328C1511F1BA0DE0B4CE1D38B0.roa (raw, json)
Hash identifier: V/Ku+cEV0wPeJCgSIHRHoWIETJ2Kgi7ztw14Iu+1pRs=
Subject key identifier: 7C:CB:05:E7:3C:AD:60:ED:BF:C6:D5:BD:7D:AD:BD:53:88:53:84:BE
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0ED1
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FABB91328C1511F1BA0DE0B4CE1D38B0.roa
Signing time: Thu 30 Jul 2026 12:55:46 +0000
ROA not before: Thu 30 Jul 2026 12:55:42 +0000
ROA not after: Wed 30 Jul 2036 12:55:42 +0000
asID: 399138
IP address blocks: 192.142.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Aug 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3793 (0xed1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 30 12:55:42 2026 GMT
Not After : Jul 30 12:55:42 2036 GMT
Subject: CN=6a6b49d2-5f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cf:5e:e3:0f:73:59:3e:b5:21:da:dd:35:6f:
ac:54:d6:95:08:d8:00:43:94:7b:70:d9:5a:93:72:
33:06:ec:32:fb:25:42:15:96:36:6a:08:db:7f:19:
7c:d1:23:f3:ba:52:f0:f2:e7:c4:3b:48:56:dd:ae:
24:ef:b1:85:7f:d4:3a:e0:fc:41:ea:7b:85:0f:05:
22:11:57:05:d6:0f:f1:d1:1c:a7:df:c6:b2:ad:8b:
8b:52:f7:4b:8c:41:9f:6c:5e:6a:e6:96:31:49:9d:
5f:57:5a:66:2f:da:1a:11:37:0c:60:f0:cd:e3:af:
ee:92:b2:43:ab:3f:eb:f0:d8:71:78:59:0b:b5:b1:
49:00:8c:60:3e:36:6f:46:2a:3f:1f:0f:78:8f:a9:
94:0a:77:5c:c2:97:90:3a:fe:29:e2:12:fc:65:19:
c5:a8:fc:29:f2:d9:1d:f8:59:81:60:77:ea:d1:12:
16:f0:cf:75:dd:22:d9:1e:4a:50:c9:a9:90:9e:6d:
b0:5a:77:8b:e0:34:b5:ab:62:dd:33:1d:78:2b:3f:
35:a9:ff:12:5b:2e:63:b9:18:d6:91:e1:b1:af:c4:
c4:19:a4:ce:51:f7:32:50:9f:47:00:cd:b4:44:3f:
1e:1a:2a:29:3f:40:5a:57:c6:9b:f3:3e:bb:88:d9:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CB:05:E7:3C:AD:60:ED:BF:C6:D5:BD:7D:AD:BD:53:88:53:84:BE
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FABB91328C1511F1BA0DE0B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.192.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:5b:e7:45:31:85:23:a7:f5:fc:bb:13:e0:e2:6c:7d:85:dd:
b0:dd:22:48:ed:a7:47:da:53:c2:ac:79:02:df:aa:6d:cb:be:
6c:f1:b5:cc:d5:d7:53:9d:03:d1:08:ab:21:b4:ee:b2:b6:30:
6e:ff:3b:72:81:29:bb:e1:a7:a0:29:3a:03:98:a2:b8:be:5c:
4a:fc:1b:24:9f:a5:86:06:62:b4:01:a7:a0:37:aa:8c:6f:76:
1a:25:1b:95:be:00:3a:03:56:da:c5:1a:da:ef:2c:11:9e:3b:
f1:99:fd:85:e7:c6:4f:1f:57:fd:3e:40:8c:7e:61:55:1f:d0:
d0:0a:b9:30:cb:03:7f:81:ee:fb:de:da:e5:25:14:36:dd:f7:
98:4d:f0:9a:50:a1:b0:c2:39:ad:76:c2:fa:70:99:6b:f7:98:
4c:3e:f3:ee:fb:4b:e7:6f:54:a5:5b:9e:3e:9e:86:ca:dc:08:
bf:5e:af:cd:c1:53:0e:ea:65:5b:b1:c1:76:dd:cc:13:1c:94:
05:ad:df:24:cb:b8:69:e6:3a:c0:6d:df:af:23:07:9c:54:6b:
95:14:e0:cd:7a:69:57:9a:c1:d1:d2:b6:a1:2d:6b:48:a3:01:
f0:93:e4:1e:f2:40:c5:55:57:b1:5a:36:84:6b:5a:ad:87:78:
15:8e:e6:2d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDtEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNjA3MzAxMjU1NDJaFw0zNjA3MzAxMjU1NDJaMBgxFjAU
BgNVBAMTDTZhNmI0OWQyLTVmNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDxz17jD3NZPrUh2t01b6xU1pUI2ABDlHtw2VqTcjMG7DL7JUIVljZqCNt/
GXzRI/O6UvDy58Q7SFbdriTvsYV/1Drg/EHqe4UPBSIRVwXWD/HRHKffxrKti4tS
90uMQZ9sXmrmljFJnV9XWmYv2hoRNwxg8M3jr+6SskOrP+vw2HF4WQu1sUkAjGA+
Nm9GKj8fD3iPqZQKd1zCl5A6/iniEvxlGcWo/Cny2R34WYFgd+rREhbwz3XdItke
SlDJqZCebbBad4vgNLWrYt0zHXgrPzWp/xJbLmO5GNaR4bGvxMQZpM5R9zJQn0cA
zbREPx4aKik/QFpXxpvzPruI2TtFAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfMsF
5zytYO2/xtW9fa29U4hThL4wHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0ZBQkI5MTMyOEMxNTExRjFCQTBERTBCNENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATAjsAwDQYJKoZIhvcNAQELBQAD
ggEBAKpb50UxhSOn9fy7E+DibH2F3bDdIkjtp0faU8KseQLfqm3LvmzxtczV11Od
A9EIqyG07rK2MG7/O3KBKbvhp6ApOgOYori+XEr8GySfpYYGYrQBp6A3qoxvdhol
G5W+ADoDVtrFGtrvLBGeO/GZ/YXnxk8fV/0+QIx+YVUf0NAKuTDLA3+B7vve2uUl
FDbd95hN8JpQobDCOa12wvpwmWv3mEw+8+77S+dvVKVbnj6ehsrcCL9er83BUw7q
ZVuxwXbdzBMclAWt3yTLuGnmOsBt368jB5xUa5UU4M16aVeawdHStqEta0ijAfCT
5B7yQMVVV7FaNoRrWq2HeBWO5i0=
-----END CERTIFICATE-----
Generated at Fri Jul 31 09:53:14 2026 by rpki-client